Issue #8 - April 2023

Welcome to issue eight! A lot has happened since the last edition, although I suppose that’s the way it goes, eh? As you may have seen, both Breach Forums and Genesis Market are no more. Lockbit is even taking a crack at macOS—but development is off to a rocky start.

I’ve been spending part of my weekends steadily working on a website and blog for Sources & Methods, which you can see in part today at sourcesmethods.com. While developing a series of how-to articles for that blog on OpenCTI connector development, I created a YARA connector that has been accepted by the project and sits proudly in this month’s Tools section.

Thanks for reading,

Issue #7 - March 2023

Welcome to issue seven. Now that this newsletter has really hit its stride, I’d like to expand from this monthly roundup format to include other kinds of content on a regular cadence. I’ve started work on a Sources & Methods website and blog where I can post original analysis and gists of new reports to save you time. Stay tuned!

Thanks for reading,

Matthew Conway (@mattreduce)

Issue #6 - February 2023

Welcome to issue six. I’m pleased to share that, as of this month, Sources & Methods has over 100 subscribers. Thanks for being one of them!

Details are shaping up for some of this year’s conferences. I chose four to feature across the United States, Mexico, and France. Check them out in the Events section at the end of the issue.

Thanks,

Issue #5 - January 2023

Happy New Year! I hope everyone enjoyed their holidays and feel ready (as you can be) to get back to it.

📁 Sources

Abused Legitimate Services - This GitHub repository is a collection of legitimate web services that have been used for nefarious purposes like malware delivery, C2, and phishing.

Issue #N - MONTH YEAR

…

📁 Sources

Source - description

Issue #3 - November 2022

Welcome to issue 003 of Sources & Methods newsletter, the CYBERWARCON edition. What am I changing for this special edition? Well, not much, actually. But I am publishing early this time to kick off the conference! Stay tuned for a recap of CYBERWARCON and BRUNCHCON (yes).

📁 Sources

ORKL Cyber Threat Intelligence Library - “Over time, the goal is to collect a complete corpus of all publicly released CTI reports to be used as a reference in scientific research and CTI reporting”

Issue #2 - October 2022

Hello to all the new subscribers—I hope you get something out of every issue. I have a few updates this time:

• SRC&MTD IRL: I’ll be at CYBERWARCON November 10-11 in Washington, D.C. I hope to see some of you there!
• Custom domain: I’ve moved newsletter archives to newsletter.sourcesmethods.com and email delivery to sourcesmethods.com. Please update your contacts or email rules accordingly, which should stay the same going forward.
• Events: I’ve also added a new Events section to announce dates for conferences and other happenings. If there are any upcoming dates I should be aware of or conferences I should track every year, let me know at hello@sourcesmethods.com.

📁 Sources

Issue #1 - September 2022

This is the first edition of Sources & Methods! I started this newsletter to share interesting sources, tools, articles and tips I come across related to Cyber Threat Intelligence and adjacent topics. I hope you find something you can use or learn from in every issue.

📁 Sources

Disposable Email Domains - list of disposable email domains, which are often used for nefarious purposes.